Privacy Policy

Last updated: 15 February 2026

1. Data Controller

Ava Arcade ("we", "us", "our") is the data controller responsible for your personal data. This policy is issued under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Contact email: support@avaarcade.com

2. What Personal Data We Collect

We collect the following categories of personal data:

• Account data: Email address, username and password (password is hashed and never stored in plain text)
• Game data: Scores, play statistics, progression data and leaderboard entries
• Payment data: When you purchase ad removal or make a donation, payment is processed entirely by Stripe. We receive a confirmation of payment and your user ID. We do not receive, process or store your card number, expiry date or CVV
• Technical data: IP address, browser type, device information and pages visited
• Cookie data: Essential session cookies and, with your consent, advertising cookies set by Google AdSense

3. How and Why We Use Your Data (Lawful Basis)

Under UK GDPR we must have a lawful basis for each processing activity:

Purpose	Data Used	Lawful Basis
Account creation and login	Email, username, password	Contract — necessary to provide the service
Storing game progress and scores	Game data	Contract — core part of service delivery
Displaying leaderboards	Username, scores	Contract — feature of the service
Processing payments	User ID, email (sent to Stripe)	Contract — necessary to fulfil your purchase
Showing advertisements	Cookie/advertising data	Consent — only with your explicit opt-in
Site security and fraud prevention	Technical data	Legitimate Interest — protecting the service

Where we rely on Legitimate Interest, we have carried out a balancing test to ensure your rights are not overridden. You may object to processing based on legitimate interest at any time (see Section 8).

4. Third-Party Data Processors

We share personal data with the following processors, each operating under a Data Processing Agreement:

• Supabase Inc. — authentication and database hosting (stores account data and game data)
• Stripe Payments UK Ltd — payment processing (authorised and regulated by the FCA)
• Google LLC — advertising via Google AdSense (only active with your cookie consent)
• Vercel Inc. — website hosting and serverless functions

Each processor has its own privacy policy. We encourage you to review them.

5. International Data Transfers

Some of our processors are based in the United States. When your data is transferred outside the UK, it is protected by appropriate safeguards:

• Vercel and Supabase operate under the UK Addendum to the EU Standard Contractual Clauses (SCCs)
• Stripe operates under Stripe's approved Data Processing Agreement and SCCs
• Google operates under Google's Data Processing Terms and SCCs

You may request a copy of the relevant safeguards by contacting us.

6. Cookies

We use the following types of cookies:

• Essential cookies: Required to keep you logged in and for the site to function. These do not require consent
• Advertising cookies: Set by Google AdSense to serve relevant ads. These are only activated after you give explicit consent via the cookie banner

You can change your cookie preferences at any time from the Settings page or by clearing your browser cookies. Rejecting non-essential cookies means you will still see ads, but they will not be personalised.

7. Data Retention

We keep your data only as long as necessary:

• Account and game data: Retained while your account is active. Deleted within 30 days of account deletion
• Payment records: Retained for 6 years after the transaction as required by HMRC for tax and accounting purposes
• Technical/log data: Retained for up to 90 days
• Cookie data: Advertising cookies expire according to Google's retention schedule (typically 13 months)

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you (Subject Access Request)
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your data ("right to be forgotten")
• Right to restrict processing: Request that we limit how we use your data
• Right to data portability: Request your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interest
• Right to withdraw consent: Where processing is based on consent (e.g. advertising cookies), you may withdraw consent at any time. This does not affect the lawfulness of processing before withdrawal
• Rights related to automated decision-making: We do not use automated decision-making or profiling that produces legal or similarly significant effects

To exercise any of these rights, email us at support@avaarcade.com. We will respond within one month.

9. Complaints

If you are unhappy with how we handle your data, please contact us first at support@avaarcade.com so we can resolve the issue.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Phone: 0303 123 1113

10. Children's Privacy

Our service is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you are under 13, please do not create an account. If we become aware that we have collected data from a child under 13, we will delete it promptly.

11. Data Security

We take appropriate technical and organisational measures to protect your data, including:

• All data transmitted over HTTPS (TLS encryption)
• Passwords hashed using industry-standard algorithms (never stored in plain text)
• Database access restricted by role-based permissions
• Payment data handled entirely by PCI DSS-compliant processor (Stripe)

12. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top will change. For significant changes, we will make reasonable efforts to notify users (e.g. via a banner on the site).

13. Contact

For any questions about this privacy policy or to exercise your data rights:

Email: support@avaarcade.com

Terms of Service

Last updated: 15 February 2026

1. Acceptance of Terms

By accessing and using Ava Arcade (avaarcade.com), you agree to be bound by these terms. If you do not agree, please do not use the service. These terms are governed by the laws of England and Wales.

2. The Service

Ava Arcade is a free-to-play web-based gaming platform. We provide browser games, leaderboards and user profiles. Some features require a registered account. The service is provided by Ava Arcade, contactable at support@avaarcade.com.

3. Accounts

You are responsible for maintaining the security of your account credentials. You must provide accurate information when creating an account. You must be at least 13 years old to create an account. We reserve the right to suspend or terminate accounts that violate these terms.

4. Acceptable Use

You agree not to:

• Use the service for any unlawful purpose
• Attempt to cheat, exploit bugs, or manipulate leaderboards
• Use automated scripts or bots to interact with the service
• Interfere with or disrupt the service or servers
• Impersonate other users or misrepresent your identity
• Upload or transmit malicious code or harmful content

5. Payments and Digital Content

Ad removal is a one-time purchase of £2.99 (inclusive of any applicable taxes). It provides permanent removal of all advertisements on your account. Payment is processed securely by Stripe Payments UK Ltd.

5.1 Your Cancellation Rights

Under the Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013, you normally have a 14-day cooling-off period for online purchases. However, because ad removal is digital content that is delivered immediately upon purchase, you will be asked to consent to immediate delivery at checkout. By consenting, you acknowledge that you lose your 14-day cancellation right once the ad-free feature is activated on your account.

5.2 Quality of Digital Content

Under the Consumer Rights Act 2015, digital content must be of satisfactory quality, fit for purpose and as described. If the ad removal feature does not work as described (i.e. ads are not removed), you are entitled to:

• A repair or replacement within a reasonable time at no cost
• If repair or replacement is not possible, a full or partial refund
• Within the first 30 days, a full refund if the feature is faulty

5.3 Donations

Donations are voluntary contributions to support Ava Arcade. The minimum donation is £1.00. Donors receive a Donor badge on their profile. Donations are non-refundable as they are not purchases of goods or services. All donations are processed by Stripe.

5.4 Pricing

Prices may change, but any purchase you have already made will be honoured at the price you paid.

6. Intellectual Property

All content on Ava Arcade, including games, graphics, logos, audio and source code, is owned by us or our licensors and is protected by copyright and other intellectual property laws. You may not copy, modify, distribute, reverse-engineer or create derivative works from any part of the service without our written permission.

By creating an account and submitting a username, you grant us a licence to display that username publicly on leaderboards and within the service.

7. Availability

We aim to keep Ava Arcade available at all times but do not guarantee uninterrupted access. We may modify, suspend or discontinue any part of the service at any time. Where reasonably possible, we will give advance notice of planned downtime.

8. Limitation of Liability

To the fullest extent permitted by law:

• Ava Arcade is provided "as is" without warranties of any kind, express or implied
• We shall not be liable for any indirect, incidental or consequential damages arising from your use of the service
• Our total liability for any claim shall not exceed the amount you have paid us in the 12 months preceding the claim

Nothing in these terms excludes or limits our liability for: death or personal injury caused by our negligence; fraud or fraudulent misrepresentation; or any liability that cannot be excluded or limited by English law, including your statutory rights under the Consumer Rights Act 2015.

9. Termination

We may terminate or suspend your access if you violate these terms. Where possible, we will give you notice and an opportunity to remedy the breach. You may delete your account at any time from the settings page. Upon account deletion, your personal data will be removed in accordance with our Privacy Policy.

10. Dispute Resolution

If you have a complaint, please contact us at support@avaarcade.com and we will do our best to resolve it. These terms are governed by the laws of England and Wales, and any disputes shall be subject to the non-exclusive jurisdiction of the courts of England and Wales. This does not affect your statutory rights as a consumer.

11. Changes to These Terms

We may update these terms from time to time. The "Last updated" date at the top will change. For material changes, we will make reasonable efforts to notify users. Continued use of the service after changes constitutes acceptance of the new terms.

12. Contact

If you have any questions about these terms:

Email: support@avaarcade.com